feat: change log tab with filters, revision links and clear button
ChangeLog gains query()/abilities()/clear() (filters: ability, user, result, date range - all optional and additive). LogTab/LogListTable render the "Protokoll" admin tab: WP_List_Table with pagination, links to the post/attachment/nav_menu edit screen by object_type, a revision link shown only when the user may edit the revision's parent post, and a nonce+manage_options-gated "Protokoll leeren" with a JS confirmation and highlighted 'partial' rows. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7
This commit is contained in:
Claude Opus 5.5
@@ -0,0 +1,199 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace LIT\MCP\Admin;
|
||||
|
||||
use LIT\MCP\ChangeLog\ChangeLog;
|
||||
use LIT\MCP\Limits;
|
||||
|
||||
/**
|
||||
* Tab "Protokoll": filterable list of change log entries, links to revisions, and
|
||||
* "Protokoll leeren" (spec §8.3).
|
||||
*/
|
||||
final class LogTab implements AdminTab
|
||||
{
|
||||
public const CLEAR_ACTION = 'lit_mcp_clear_log';
|
||||
private const RESULTS = ['ok', 'partial'];
|
||||
|
||||
/** @var callable(): void */
|
||||
private $terminate;
|
||||
|
||||
public function __construct(private ChangeLog $log, private Limits $limits, ?callable $terminate = null)
|
||||
{
|
||||
$this->terminate = $terminate ?? static function (): void {
|
||||
exit;
|
||||
};
|
||||
}
|
||||
|
||||
public function slug(): string
|
||||
{
|
||||
return 'protokoll';
|
||||
}
|
||||
|
||||
public function label(): string
|
||||
{
|
||||
return __('Protokoll', 'wp-lit-mcp');
|
||||
}
|
||||
|
||||
public function registerSettings(): void
|
||||
{
|
||||
}
|
||||
|
||||
public function registerActions(): void
|
||||
{
|
||||
add_action('admin_post_' . self::CLEAR_ACTION, [$this, 'handleClear']);
|
||||
}
|
||||
|
||||
/** @return array{ability: string, user_id: int} */
|
||||
public function filters(): array
|
||||
{
|
||||
// phpcs:disable WordPress.Security.NonceVerification.Recommended -- read-only list filters.
|
||||
$ability = isset($_GET['ability']) ? sanitize_text_field(wp_unslash((string) $_GET['ability'])) : '';
|
||||
$userId = isset($_GET['user_id']) ? absint($_GET['user_id']) : 0;
|
||||
// phpcs:enable WordPress.Security.NonceVerification.Recommended
|
||||
|
||||
return [
|
||||
'ability' => preg_match('#^[a-z0-9-]+/[a-z0-9-]+$#', $ability) === 1 ? $ability : '',
|
||||
'user_id' => $userId,
|
||||
];
|
||||
}
|
||||
|
||||
/**
|
||||
* Additional whitelisted filters (ruling C5/Q13: ability, result, user, date range).
|
||||
* Kept separate from filters() so that method's return shape stays exactly what is
|
||||
* unit-tested (and what earlier callers of this tab may already rely on).
|
||||
*
|
||||
* @return array{result: string, date_from: string, date_to: string}
|
||||
*/
|
||||
public function extraFilters(): array
|
||||
{
|
||||
// phpcs:disable WordPress.Security.NonceVerification.Recommended -- read-only list filters.
|
||||
$result = isset($_GET['result']) ? sanitize_text_field(wp_unslash((string) $_GET['result'])) : '';
|
||||
$dateFrom = isset($_GET['date_from']) ? sanitize_text_field(wp_unslash((string) $_GET['date_from'])) : '';
|
||||
$dateTo = isset($_GET['date_to']) ? sanitize_text_field(wp_unslash((string) $_GET['date_to'])) : '';
|
||||
// phpcs:enable WordPress.Security.NonceVerification.Recommended
|
||||
|
||||
return [
|
||||
'result' => in_array($result, self::RESULTS, true) ? $result : '',
|
||||
'date_from' => self::isDate($dateFrom) ? $dateFrom : '',
|
||||
'date_to' => self::isDate($dateTo) ? $dateTo : '',
|
||||
];
|
||||
}
|
||||
|
||||
private static function isDate(string $value): bool
|
||||
{
|
||||
return preg_match('#^\d{4}-\d{2}-\d{2}$#', $value) === 1;
|
||||
}
|
||||
|
||||
public function render(): void
|
||||
{
|
||||
if (! class_exists('WP_List_Table')) {
|
||||
require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
|
||||
}
|
||||
|
||||
$filters = $this->filters();
|
||||
$extra = $this->extraFilters();
|
||||
printf(
|
||||
'<p>%s</p>',
|
||||
esc_html(sprintf(
|
||||
/* translators: %d: number of days */
|
||||
__('Einträge werden nach %d Tagen automatisch gelöscht (einstellbar im Tab „Limits“).', 'wp-lit-mcp'),
|
||||
$this->limits->logRetentionDays()
|
||||
))
|
||||
);
|
||||
printf('<p>%s</p>', esc_html__('Das Protokoll enthält nur Verweise, keine Inhalte.', 'wp-lit-mcp'));
|
||||
|
||||
$this->renderFilterForm($filters, $extra);
|
||||
|
||||
$table = new LogListTable($this->log, $filters + $extra);
|
||||
$table->prepare_items();
|
||||
$table->display();
|
||||
|
||||
$this->renderClearForm();
|
||||
}
|
||||
|
||||
/**
|
||||
* @param array{ability: string, user_id: int} $filters
|
||||
* @param array{result: string, date_from: string, date_to: string} $extra
|
||||
*/
|
||||
private function renderFilterForm(array $filters, array $extra): void
|
||||
{
|
||||
echo '<form method="get">';
|
||||
printf('<input type="hidden" name="page" value="%s">', esc_attr(SettingsPage::SLUG));
|
||||
printf('<input type="hidden" name="tab" value="%s">', esc_attr($this->slug()));
|
||||
|
||||
echo '<select name="ability"><option value="">' . esc_html__('Alle Tools', 'wp-lit-mcp') . '</option>';
|
||||
foreach ($this->log->abilities() as $ability) {
|
||||
printf(
|
||||
'<option value="%1$s"%2$s>%1$s</option>',
|
||||
esc_attr($ability),
|
||||
selected($filters['ability'], $ability, false)
|
||||
);
|
||||
}
|
||||
echo '</select> ';
|
||||
|
||||
wp_dropdown_users([
|
||||
'name' => 'user_id',
|
||||
'show_option_all' => __('Alle Benutzer', 'wp-lit-mcp'),
|
||||
'selected' => $filters['user_id'],
|
||||
]);
|
||||
echo ' ';
|
||||
|
||||
echo '<select name="result">';
|
||||
printf('<option value="">%s</option>', esc_html__('Alle Ergebnisse', 'wp-lit-mcp'));
|
||||
foreach (self::RESULTS as $result) {
|
||||
printf(
|
||||
'<option value="%1$s"%2$s>%1$s</option>',
|
||||
esc_attr($result),
|
||||
selected($extra['result'], $result, false)
|
||||
);
|
||||
}
|
||||
echo '</select> ';
|
||||
|
||||
printf(
|
||||
'<label>%s <input type="date" name="date_from" value="%s"></label> ',
|
||||
esc_html__('von', 'wp-lit-mcp'),
|
||||
esc_attr($extra['date_from'])
|
||||
);
|
||||
printf(
|
||||
'<label>%s <input type="date" name="date_to" value="%s"></label> ',
|
||||
esc_html__('bis', 'wp-lit-mcp'),
|
||||
esc_attr($extra['date_to'])
|
||||
);
|
||||
|
||||
submit_button(__('Filtern', 'wp-lit-mcp'), 'secondary', '', false);
|
||||
echo '</form>';
|
||||
}
|
||||
|
||||
private function renderClearForm(): void
|
||||
{
|
||||
printf('<form method="post" action="%s">', esc_url(admin_url('admin-post.php')));
|
||||
printf('<input type="hidden" name="action" value="%s">', esc_attr(self::CLEAR_ACTION));
|
||||
wp_nonce_field(self::CLEAR_ACTION);
|
||||
$confirmMessage = esc_js(__(
|
||||
'Das gesamte Protokoll unwiderruflich löschen?',
|
||||
'wp-lit-mcp'
|
||||
));
|
||||
submit_button(
|
||||
__('Protokoll leeren', 'wp-lit-mcp'),
|
||||
'delete',
|
||||
'submit',
|
||||
false,
|
||||
['onclick' => "return window.confirm('" . $confirmMessage . "');"]
|
||||
);
|
||||
echo '</form>';
|
||||
}
|
||||
|
||||
public function handleClear(): void
|
||||
{
|
||||
if (! current_user_can('manage_options')) {
|
||||
wp_die(esc_html__('Keine Berechtigung.', 'wp-lit-mcp'), '', ['response' => 403]);
|
||||
}
|
||||
|
||||
check_admin_referer(self::CLEAR_ACTION);
|
||||
$this->log->clear();
|
||||
wp_safe_redirect(SettingsPage::url($this->slug(), ['lit_mcp_notice' => 'cleared']));
|
||||
($this->terminate)();
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user